CCP Blueprint - Revision history

David at 01:32, 2 March 2026

2026-03-02T01:32:18Z

← Older revision		Revision as of 01:32, 2 March 2026
Line 1:		Line 1:
	'''Source of Reference: The CCP blueprint document from [https://cyberab.org/CMMC-Ecosystem/Ecosystem-roles/Assessing-and-Certification Cybersecurity Maturity Model Certification Accreditation Body, Inc.]'''		'''Source of Reference: The CCP blueprint document from [https://cyberab.org/CMMC-Ecosystem/Ecosystem-roles/Assessing-and-Certification Cybersecurity Maturity Model Certification Accreditation Body, Inc.]'''

	For inquiries and reporting errors on this wiki, please [mailto:support@~~cmmctoolkit~~.org contact us]. Thank you.		For inquiries and reporting errors on this wiki, please [mailto:support@cmmcwiki.org contact us]. Thank you.

	== Domains ==		== Domains ==

Wikiadmin: /* Task 1. Identify and apply knowledge of the Guiding Principles and Practices of the CMMC-AB Code of Professional Conduct (CoPC)/ISO/IEC/DOD requirements. */

2023-05-08T23:23:33Z

Task 1. Identify and apply knowledge of the Guiding Principles and Practices of the CMMC-AB Code of Professional Conduct (CoPC)/ISO/IEC/DOD requirements.

← Older revision		Revision as of 23:23, 8 May 2023
Line 268:		Line 268:
	\|2. CMMC-AB Code of Professional Conduct (CoPC)		\|2. CMMC-AB Code of Professional Conduct (CoPC)
	\|-		\|-
	\|4B		\|3B, 4A
	\|2.1.3		\|2.1.3
	\|3. ISO/IEC		\|3. ISO/IEC
Line 308:		Line 308:
	\|12. Lawful and ethical practices		\|12. Lawful and ethical practices
	\|-		\|-
	\|4B		\|4A, 4B, 7A, 10B
	\|2.1.13		\|2.1.13
	\|13. Contracts and non-disclosure agreements		\|13. Contracts and non-disclosure agreements

Wikiadmin at 18:17, 5 May 2023

2023-05-05T18:17:39Z

← Older revision		Revision as of 18:17, 5 May 2023
Line 1:		Line 1:
	'''Source of Reference: The ~~[https://cyberab.org/Portals/0/Documents/Assessor%20Documents/cmmc-ab-ccp-blueprint-08-10-22-final-v7.3%20FINAL%20(Public).pdf?ver=fg4bWVz6U21y1MHygoSCgA%3d%3d~~ CCP blueprint] from [https://cyberab.org/CMMC-Ecosystem/Ecosystem-roles/Assessing-and-Certification Cybersecurity Maturity Model Certification Accreditation Body, Inc.]'''		'''Source of Reference: The CCP blueprint document from [https://cyberab.org/CMMC-Ecosystem/Ecosystem-roles/Assessing-and-Certification Cybersecurity Maturity Model Certification Accreditation Body, Inc.]'''

	For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you.		For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you.

Wikiadmin at 01:32, 24 August 2022

2022-08-24T01:32:34Z

← Older revision		Revision as of 01:32, 24 August 2022
Line 1:		Line 1:
	'''Source of Reference: The [https://cyberab.org/Portals/0/cmmc-ab-ccp-blueprint-03-14-22-final-~~v7_2~~%20FINAL%20%~~28Public~~%~~29_1.pdf~~ CCP blueprint] from Cybersecurity Maturity Model Certification Accreditation Body, Inc.'''		'''Source of Reference: The [https://cyberab.org/Portals/0/Documents/Assessor%20Documents/cmmc-ab-ccp-blueprint-08-10-22-final-v7.3%20FINAL%20(Public).pdf?ver=fg4bWVz6U21y1MHygoSCgA%3d%3d CCP blueprint] from [https://cyberab.org/CMMC-Ecosystem/Ecosystem-roles/Assessing-and-Certification Cybersecurity Maturity Model Certification Accreditation Body, Inc.]'''

	For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you.		For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you.

Wikiadmin: /* Task 2. Given a Scenario, analyze the organization environment to generate an appropriate scope for FCI Assets. */

2022-08-07T00:11:30Z

Task 2. Given a Scenario, analyze the organization environment to generate an appropriate scope for FCI Assets.

@@ Line 1,157: / Line 1,157: @@
 === Task 2. Given a Scenario, analyze the organization environment to generate an appropriate scope for FCI Assets. ===
-{|class="wikitable"
+{|class="wikitable" style="width: 85%;"
 |1. Defining FCI data in the form of Assets that:
 :A. Process
 :B. Store
 :C. Transmit
 |-
 |2. Out-of-Scope Assets
 |-
 |3. Specialized Assets
 :A. Government Property
 :B. Internet of Things (IoT)/ Industrial Internet of Things (IIoT)
 :C. Operational Technology (OT)
 :D. Restricted Information Systems
 :E. Test Equipment
 |-
 |4. Scoping Activities
 :A. People
 :B. Technology
 :C. Facilities
 :D. External Service Providers (ESP)
 |}

Wikiadmin: /* Task 1. Understand CMMC High-Level Scoping as described in the CMMC Assessment Process. */

2022-08-07T00:09:05Z

Task 1. Understand CMMC High-Level Scoping as described in the CMMC Assessment Process.

@@ Line 1,130: / Line 1,130: @@
 == Domain 6: Scoping ==
 === Task 1. Understand CMMC High-Level Scoping as described in the CMMC Assessment Process. ===
-{|class="wikitable"
+{|class="wikitable" style="width: 85%;"
 |1. Defining organizational scoping
 :A. Organization
 :B. Host Unit
 :C. Supporting Units
 |}

Wikiadmin: /* Task 5. Given a scenario, determine the appropriate phases/steps to assist in the preparation/conducting/ reporting on a CMMC Level 2 Assessment. */

2022-08-07T00:08:01Z

Task 5. Given a scenario, determine the appropriate phases/steps to assist in the preparation/conducting/ reporting on a CMMC Level 2 Assessment.

@@ Line 1,065: / Line 1,065: @@
 === Task 5. Given a scenario, determine the appropriate phases/steps to assist in the preparation/conducting/ reporting on a CMMC Level 2 Assessment. ===
-{|class="wikitable"
+{|class="wikitable" style="width: 85%;"
 |1. Plan and Prepare Assessments:
 :A. CMMC CCP must be able to assist in analyzing requirements.
 :B. CMMC CCP must be able to assist in developing assessment plan.
 :C. CMMC CCP must be able to assist in verifying readiness to conduct assessment.
 |-
 |2. Conduct Assessment:
 :A. CMMC CCP must be able to assist in collecting and examining Evidence.
 :B. CMMC CCP must be able to assist in scoring practices and validating preliminary results.
 :C. CMMC CCP must be able to assist in generating final assessment results.
 |-
 |3. Report Recommended Assessment Results:
 :A. CMMC CCP must be able to assist in delivering recommended assessment results.
 |-
 |4. Remediate Outstanding Assessment Issues:
 :A. Awareness of the CCP’s Role in the POA&M Process
 |}

Wikiadmin: /* Task 4. Demonstrate comprehension of the CCP role in the process of evaluating outstanding assessment issues on Plan of Action and Milestones (POA&M) (Phase 4 – Evaluation of Outstanding Assessment POA&M Items). */

2022-08-07T00:05:06Z

Task 4. Demonstrate comprehension of the CCP role in the process of evaluating outstanding assessment issues on Plan of Action and Milestones (POA&M) (Phase 4 – Evaluation of Outstanding Assessment POA&M Items).

@@ Line 1,033: / Line 1,033: @@
 === Task 4. Demonstrate comprehension of the CCP role in the process of evaluating outstanding assessment issues on Plan of Action and Milestones (POA&M) (Phase 4 – Evaluation of Outstanding Assessment POA&M Items). ===
-{|class="wikitable"
+{|class="wikitable" style="width: 85%;"
 |1. The evaluation of assessment POA&M items
 :A. DoD Assessment Methodology, POA&M scoring criteria
 ::(1) Minimum assessment score
 ::(2) Qualifying POA&M items
 :B. CMMC AG CA.L2-3.12.2, Plan of Action objectives and requirements
 |}

Wikiadmin: /* Task 3. Demonstrate comprehension of the CCP role in the preparation of assessment report (Phase 3 – Report Assessment Results). */

2022-08-07T00:03:55Z

Task 3. Demonstrate comprehension of the CCP role in the preparation of assessment report (Phase 3 – Report Assessment Results).

← Older revision		Revision as of 00:03, 7 August 2022
Line 1,001:		Line 1,001:

	=== Task 3. Demonstrate comprehension of the CCP role in the preparation of assessment report (Phase 3 – Report Assessment Results). ===		=== Task 3. Demonstrate comprehension of the CCP role in the preparation of assessment report (Phase 3 – Report Assessment Results). ===
	{\|class="wikitable"		{\|class="wikitable" style="width: 85%;"
	\|		\|-
	# The evidence presented for each practice		! style="width: 10%"\|Lesson Topic
	# How Assessment Team Members score practices, validate, and deliver assessment preliminary results		! style="width: 10%"\|Objective
	# How the Assessment Lead drafts and scores the final findings		! style="width: 80%"\|Objective Description
	# How the final findings and associated information are incorporated into the Assessment Report		\|-
	# How the Lead Assessor submits the assessment report, including the review process, submitting to the C3PAO and the OSC		\|10D
	# How to package and archive the assessment results for a record to support any future questions that may be asked		\|5.3.1
			\|1. The evidence presented for each practice
			\|-
			\|7B, 10C
			\|5.3.2
			\|2. How Assessment Team Members score practices, validate, and deliver assessment preliminary results
			\|-
			\|10C
			\|5.3.3
			\|3. How the Assessment Lead drafts and scores the final findings
			\|-
			\|10D
			\|5.3.4
			\|4.# How the final findings and associated information are incorporated into the Assessment Report
			\|-
			\|10D
			\|5.3.5
			\|5. How the Lead Assessor submits the assessment report, including the review process, submitting to the C3PAO and the OSC
			\|-
			\|10D
			\|5.3.6
			\|6. How to package and archive the assessment results for a record to support any future questions that may be asked
	\|}		\|}

Wikiadmin: /* Task 2. Apply CMMC Assessment Process requirements pertaining to the role of the CCP as an assessment team member while conducting a CMMC assessment (Phase 2 – Conduct Assessment). */

2022-08-06T23:59:58Z

Task 2. Apply CMMC Assessment Process requirements pertaining to the role of the CCP as an assessment team member while conducting a CMMC assessment (Phase 2 – Conduct Assessment).

← Older revision		Revision as of 23:59, 6 August 2022
Line 969:		Line 969:

	=== Task 2. Apply CMMC Assessment Process requirements pertaining to the role of the CCP as an assessment team member while conducting a CMMC assessment (Phase 2 – Conduct Assessment). ===		=== Task 2. Apply CMMC Assessment Process requirements pertaining to the role of the CCP as an assessment team member while conducting a CMMC assessment (Phase 2 – Conduct Assessment). ===
	{\|class="wikitable"		{\|class="wikitable" style="width: 85%;"
	\|		\|-
	# How to assist/support the Assessment Team during an assessment		! style="width: 10%"\|Lesson Topic
	# The three possible assessment methods (Examine, Interview, and Test) and scoring evidence successfully for each practice		! style="width: 10%"\|Objective
	# Communication skills to interview or observe tests/demonstrations for assessment practices		! style="width: 80%"\|Objective Description
	# How Assessment Team Members rate practices and validate preliminary results		\|-
	# How Assessment Team Members assist in the preparation of final findings		\|7B, 10C
	# How to score practices that are on a Plan of Action and Milestone (POA&M)		\|5.2.1
			\|1. How to assist/support the Assessment Team during an assessment
			\|-
			\|7A, 7B, 10C
			\|5.2.2
			\|2. The three possible assessment methods (Examine, Interview, and Test) and scoring evidence successfully for each practice
			\|-
			\|10A, 10C
			\|5.2.3
			\|3. Communication skills to interview or observe tests/demonstrations for assessment practices
			\|-
			\|7B, 8C, 10C
			\|5.2.4
			\|4. How Assessment Team Members rate practices and validate preliminary results
			\|-
			\|10C
			\|5.2.5
			\|5. How Assessment Team Members assist in the preparation of final findings
			\|-
			\|10C
			\|5.2.6
			\|6. How to score practices that are on a Plan of Action and Milestone (POA&M)
	\|}		\|}